CVE-2005-3992

HOCH 7.5CVE-2005-3992 · Published 04/12/2005 · updated 16/06/2026

Kurz gesagt

CVE-2005-3992 ist eine Schwachstelle (HOCH (CVSS 7.5)) in wineggdropshell (wineggdropshell).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 5.0%, höher als bei 92.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
wineggdropshell wineggdropshell	`= 1.7`	No fix yet

Description

Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.

References

archives.neohapsis.com/archives/fulldisclosure/2005-12/0059.html · Exploit
securityreason.com/securityalert/226
secway.org/advisory/AD20051202.txt · Vendor Advisory
securityfocus.com/archive/1/418398 · Exploit
securityfocus.com/bid/15682 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free